301-frameworks-spring-boot-core
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to run Maven build commands (
mvn compile,mvn clean verify) and use the Maven Wrapper (./mvnw). These are standard industry practices for Java development and are utilized here as safety gates to prevent applying broken code. - [PROMPT_INJECTION]: The skill operates on external Java source code and configuration files, creating an indirect prompt injection surface. (1) Ingestion points: Java source files, pom.xml, and application.yml. (2) Boundary markers: Not present. (3) Capability inventory: Shell command execution via mvn/mvnw. (4) Sanitization: Not present. This risk is documented as an inherent property of code-processing tools, but no specific exploits are present in the skill's instructions.
Audit Metadata